[ 13.936891][ T310] 8021q: 802.1Q VLAN Support v1.8 [ 14.697221][ T321] gre: GRE over IPv4 demultiplexor driver [ 14.710128][ T321] ip_gre: GRE over IPv4 tunneling driver [ 15.975423][ T341] ================================================================== [ 15.975686][ T341] BUG: KASAN: null-ptr-deref in nexthop_create_group+0x32c/0x1550 [ 15.975931][ T341] Read of size 4 at addr 0000000000000068 by task ip/341 [ 15.976097][ T341] [ 15.976176][ T341] CPU: 3 UID: 0 PID: 341 Comm: ip Not tainted 6.14.0-rc6-virtme #1 [ 15.976182][ T341] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 15.976184][ T341] Call Trace: [ 15.976186][ T341] [ 15.976187][ T341] dump_stack_lvl+0x82/0xd0 [ 15.976194][ T341] kasan_report+0xbd/0xf0 [ 15.976199][ T341] ? nexthop_create_group+0x32c/0x1550 [ 15.976205][ T341] kasan_check_range+0x39/0x1c0 [ 15.976209][ T341] nexthop_create_group+0x32c/0x1550 [ 15.976215][ T341] ? __pfx_nexthop_create_group+0x10/0x10 [ 15.976218][ T341] ? __nla_validate_parse+0x1bc/0x3d0 [ 15.976225][ T341] rtm_new_nexthop+0x310/0x8b0 [ 15.976229][ T341] ? hlock_class+0x4e/0x130 [ 15.976233][ T341] ? mark_lock+0x38/0x3e0 [ 15.976237][ T341] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 15.976249][ T341] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 15.976255][ T341] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 15.976258][ T341] rtnetlink_rcv_msg+0x712/0xc10 [ 15.976263][ T341] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 15.976267][ T341] ? hlock_class+0x4e/0x130 [ 15.976269][ T341] ? mark_lock+0x38/0x3e0 [ 15.976274][ T341] ? __lock_acquire+0xb9a/0x1680 [ 15.976278][ T341] netlink_rcv_skb+0x130/0x360 [ 15.976282][ T341] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 15.976286][ T341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 15.976294][ T341] ? netlink_deliver_tap+0x13e/0x340 [ 15.976297][ T341] ? netlink_deliver_tap+0xc3/0x340 [ 15.976301][ T341] netlink_unicast+0x44b/0x710 [ 15.976305][ T341] ? __pfx_netlink_unicast+0x10/0x10 [ 15.976308][ T341] ? find_held_lock+0x2c/0x110 [ 15.976312][ T341] netlink_sendmsg+0x723/0xbe0 [ 15.976316][ T341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 15.976322][ T341] ____sys_sendmsg+0x7ac/0xa10 [ 15.976328][ T341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 15.976331][ T341] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 15.976338][ T341] ___sys_sendmsg+0xee/0x170 [ 15.976341][ T341] ? hlock_class+0x4e/0x130 [ 15.976344][ T341] ? __pfx____sys_sendmsg+0x10/0x10 [ 15.976348][ T341] ? hlock_class+0x12/0x130 [ 15.976353][ T341] ? do_user_addr_fault+0x8fd/0xe30 [ 15.976357][ T341] ? do_user_addr_fault+0x8fd/0xe30 [ 15.976361][ T341] ? find_held_lock+0x2c/0x110 [ 15.976365][ T341] ? __lock_release+0x103/0x460 [ 15.976369][ T341] __sys_sendmsg+0x109/0x1a0 [ 15.976372][ T341] ? __pfx___sys_sendmsg+0x10/0x10 [ 15.976377][ T341] ? do_user_addr_fault+0x97c/0xe30 [ 15.976382][ T341] do_syscall_64+0xc1/0x1d0 [ 15.976386][ T341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 15.976391][ T341] RIP: 0033:0x7fb20d91d9a7 [ 15.976394][ T341] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 15.976397][ T341] RSP: 002b:00007ffd6ea3f2b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 15.976401][ T341] RAX: ffffffffffffffda RBX: 00007ffd6ea3fe10 RCX: 00007fb20d91d9a7 [ 15.976403][ T341] RDX: 0000000000000000 RSI: 00007ffd6ea3f320 RDI: 0000000000000005 [ 15.976405][ T341] RBP: 00007ffd6ea3f7e0 R08: 000000003b554910 R09: 0000000000000000 [ 15.976407][ T341] R10: 00007fb20d7d6708 R11: 0000000000000246 R12: 000000003b554918 [ 15.976409][ T341] R13: 0000000067da665e R14: 0000000000498600 R15: 000000003b554910 [ 15.976414][ T341] [ 15.976415][ T341] ================================================================== [ 15.987560][ T341] Disabling lock debugging due to kernel taint [ 15.987852][ T341] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 15.988353][ T341] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 15.988669][ T341] CPU: 3 UID: 0 PID: 341 Comm: ip Tainted: G B 6.14.0-rc6-virtme #1 [ 15.989042][ T341] Tainted: [B]=BAD_PAGE [ 15.989218][ T341] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 15.989465][ T341] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 15.989737][ T341] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 84 19 2f fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 15.990452][ T341] RSP: 0018:ffffc900006173c8 EFLAGS: 00010202 [ 15.990720][ T341] RAX: 000000000000000d RBX: ffff88800e1203e8 RCX: ffffffff9a253d8a [ 15.991026][ T341] RDX: fffffbfff3ea2491 RSI: 0000000000000008 RDI: ffffffff9f512480 [ 15.991326][ T341] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff3ea2490 [ 15.991616][ T341] R10: ffffffff9f512487 R11: 205d313433542020 R12: dffffc0000000000 [ 15.991926][ T341] R13: ffff8880098d0340 R14: 0000000000000000 R15: 0000000000000068 [ 15.992230][ T341] FS: 00007fb20d711800(0000) GS:ffff888036180000(0000) knlGS:0000000000000000 [ 15.992586][ T341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 15.992847][ T341] CR2: 00007fb20d96d423 CR3: 000000000e2fe001 CR4: 0000000000772ef0 [ 15.993149][ T341] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 15.993464][ T341] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 15.993772][ T341] PKRU: 55555554 [ 15.993942][ T341] Call Trace: [ 15.994103][ T341] [ 15.994214][ T341] ? die_addr+0x41/0xa0 [ 15.994386][ T341] ? exc_general_protection+0x14d/0x230 [ 15.994625][ T341] ? asm_exc_general_protection+0x26/0x30 [ 15.994847][ T341] ? add_taint+0x2a/0x90 [ 15.995005][ T341] ? nexthop_create_group+0x333/0x1550 [ 15.995203][ T341] ? nexthop_create_group+0x32c/0x1550 [ 15.995408][ T341] ? __pfx_nexthop_create_group+0x10/0x10 [ 15.995610][ T341] ? __nla_validate_parse+0x1bc/0x3d0 [ 15.995817][ T341] rtm_new_nexthop+0x310/0x8b0 [ 15.996034][ T341] ? hlock_class+0x4e/0x130 [ 15.996234][ T341] ? mark_lock+0x38/0x3e0 [ 15.996394][ T341] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 15.996612][ T341] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 15.996824][ T341] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 15.997032][ T341] rtnetlink_rcv_msg+0x712/0xc10 [ 15.997240][ T341] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 15.997452][ T341] ? hlock_class+0x4e/0x130 [ 15.997651][ T341] ? mark_lock+0x38/0x3e0 [ 15.997834][ T341] ? __lock_acquire+0xb9a/0x1680 [ 15.998056][ T341] netlink_rcv_skb+0x130/0x360 [ 15.998268][ T341] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 15.998488][ T341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 15.998700][ T341] ? netlink_deliver_tap+0x13e/0x340 [ 15.998904][ T341] ? netlink_deliver_tap+0xc3/0x340 [ 15.999112][ T341] netlink_unicast+0x44b/0x710 [ 15.999326][ T341] ? __pfx_netlink_unicast+0x10/0x10 [ 15.999530][ T341] ? find_held_lock+0x2c/0x110 [ 15.999743][ T341] netlink_sendmsg+0x723/0xbe0 [ 15.999947][ T341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 16.000160][ T341] ____sys_sendmsg+0x7ac/0xa10 [ 16.000368][ T341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 16.000577][ T341] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 16.000844][ T341] ___sys_sendmsg+0xee/0x170 [ 16.001064][ T341] ? hlock_class+0x4e/0x130 [ 16.001279][ T341] ? __pfx____sys_sendmsg+0x10/0x10 [ 16.001482][ T341] ? hlock_class+0x12/0x130 [ 16.001687][ T341] ? do_user_addr_fault+0x8fd/0xe30 [ 16.001894][ T341] ? do_user_addr_fault+0x8fd/0xe30 [ 16.002113][ T341] ? find_held_lock+0x2c/0x110 [ 16.002318][ T341] ? __lock_release+0x103/0x460 [ 16.002525][ T341] __sys_sendmsg+0x109/0x1a0 [ 16.002732][ T341] ? __pfx___sys_sendmsg+0x10/0x10 [ 16.002946][ T341] ? do_user_addr_fault+0x97c/0xe30 [ 16.003156][ T341] do_syscall_64+0xc1/0x1d0 [ 16.003366][ T341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 16.003630][ T341] RIP: 0033:0x7fb20d91d9a7 [ 16.003847][ T341] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 16.004554][ T341] RSP: 002b:00007ffd6ea3f2b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 16.004868][ T341] RAX: ffffffffffffffda RBX: 00007ffd6ea3fe10 RCX: 00007fb20d91d9a7 [ 16.005177][ T341] RDX: 0000000000000000 RSI: 00007ffd6ea3f320 RDI: 0000000000000005 [ 16.005483][ T341] RBP: 00007ffd6ea3f7e0 R08: 000000003b554910 R09: 0000000000000000 [ 16.005792][ T341] R10: 00007fb20d7d6708 R11: 0000000000000246 R12: 000000003b554918 [ 16.006096][ T341] R13: 0000000067da665e R14: 0000000000498600 R15: 000000003b554910 [ 16.006551][ T341] [ 16.006708][ T341] Modules linked in: ip_gre gre 8021q vrf veth [ 16.007014][ T341] ---[ end trace 0000000000000000 ]--- [ 16.007234][ T341] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 16.007499][ T341] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 84 19 2f fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 16.008221][ T341] RSP: 0018:ffffc900006173c8 EFLAGS: 00010202 [ 16.008478][ T341] RAX: 000000000000000d RBX: ffff88800e1203e8 RCX: ffffffff9a253d8a [ 16.008784][ T341] RDX: fffffbfff3ea2491 RSI: 0000000000000008 RDI: ffffffff9f512480 [ 16.009103][ T341] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff3ea2490 [ 16.009417][ T341] R10: ffffffff9f512487 R11: 205d313433542020 R12: dffffc0000000000 [ 16.009719][ T341] R13: ffff8880098d0340 R14: 0000000000000000 R15: 0000000000000068 [ 16.010015][ T341] FS: 00007fb20d711800(0000) GS:ffff888036180000(0000) knlGS:0000000000000000 [ 16.010376][ T341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 16.010636][ T341] CR2: 00007fb20d96d423 CR3: 000000000e2fe001 CR4: 0000000000772ef0 [ 16.010929][ T341] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 16.011238][ T341] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 16.011536][ T341] PKRU: 55555554 [ 16.011649][ T341] Kernel panic - not syncing: Fatal exception [ 16.012019][ T341] Kernel Offset: 0x18c00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 16.012473][ T341] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr